L2 SOC Security Engineer (SIEM / SOAR / UEBA) 3 to 4 Years

Black Box Corporation; Gurgaon; On-site; INR 800,000 - 1,200,000; Full time

Job summary

Black Box Corporation in Gurgaon, India, is seeking an L2 SOC Security Engineer (3 to 4 years) to deploy, configure, and optimize SIEM, SOAR, and UEBA platforms, ensuring robust security operations.

You will onboard log sources and security tools, develop correlation rules, dashboards, and automation playbooks; perform threat hunting and incident investigation; and maintain parsers, integrations, and platform health for ongoing audits.

Qualifications

• Deploy, configure, administer, and optimize SIEM, SOAR, and UEBA platforms.
• Onboard log sources, security tools, identity sources, and business applications into the security ecosystem.
• Develop and maintain correlation rules, behavioral analytics, dashboards, reports, automation playbooks, and custom integrations.
• Investigate complex security incidents, perform threat hunting, and conduct root cause analysis.

Responsibilities

• Investigate complex security incidents, perform threat hunting.
• Develop and optimize parsers, connectors, APIs, and automation workflows to improve SOC efficiency.
• Fine-tune detection rules, behavioral models, and risk scoring to minimize false positives.
• Ensure platform availability, performance optimization, upgrades, backup, and overall system health.

Skills

SIEM

SOAR

UEBA

Threat hunting

Incident response

Log onboarding

Automation workflows

Parsers & connectors

Job description

L2 SOC Security Engineer (SIEM / SOAR / UEBA) 3 to 4 Years

Job Description

• Deploy, configure, administer, and optimize SIEM, SOAR, and UEBA platforms.
• Onboard log sources, security tools, identity sources, and business applications into the security ecosystem.
• Develop and maintain correlation rules, behavioral analytics, dashboards, reports, automation playbooks, and custom integrations.
• Investigate complex security incidents, perform threat hunting, and conduct root cause analysis.
• Develop and optimize parsers, connectors, APIs, and automation workflows to improve SOC efficiency.
• Fine-tune detection rules, behavioral models, and risk scoring to minimize false positives.
• Ensure platform availability, performance optimization, upgrades, backup, and overall system health.
• Support compliance, audit requirements, use case development, documentation, and provide technical guidance to L1 analysts.